On: Behavioral Profiling: The password you can't change (2015)

[divan]

The coolest thing I've seen in this space is Hristo Bojinov's work on implicit learning. Meaning the password is planted into user's brain without them conciously knowing it so they can't be coerced to reveal it.

Not sure if it got any further traction, though.

Here is the paper from USENIX Security 2012:

Neuroscience Meets Cryptography: Designing Crypto Primitives Secure Against Rubber Hose Attacks http://bojinov.org/pdfs/usenixsec2012-rubberhose.pdf